Question about editing SEPolicy CIL and precompiled_sepolicy workflow

[fitronai]

Hey everyone,

Quick question regarding the correct workflow for editing SELinux rules via .cil files in the vendor partition. Inside my vendor/etc/selinux/ folder, files like:

• vendor_sepolicy.cil
• plat_pub_versioned.cil
• precompiled_sepolicy
• precompiled_sepolicy.plat_sepolicy_and_mapping.sha256 etc etc

Since the MIO Kitchen GUI doesn't have a dedicated CIL compiler button, I want to clarify a few things to avoid bootloops:

1. Which file should I actually edit? If I want to add custom rules, should I put them in vendor_sepolicy.cil or plat_pub_versioned.cil?
2. Handling precompiled & hashes: After editing the .cil file, do I need to manually delete precompiled_sepolicy and its .sha256 file before running Repack Vendor? Will Android just rebuild the binary on first boot, or does MIO Kitchen automatically handle/update the hashes during repack?
3. Automation: Is there any hidden feature or setting in the kitchen that triggers a sepolicy recompile automatically when packing vendor?

Appreciate any insights on this, thanks!